Privacy Policy

1. Who We Are

Travel Pen is a user-generated travel story platform operated from the United Kingdom. For the purposes of UK GDPR and the Data Protection Act 2018, Travel Pen is the data controller for personal data collected through this platform. You can contact us at admin@travelpen.io.

2. What Data We Collect

We collect the following categories of personal data:

• Account information: your name, email address, and any profile details you provide when registering.
• Content you publish: stories, photographs, tags, and any other material you submit to the platform.
• Usage data: information about how you use the platform, including pages visited and features used, collected via cookies and analytics tools.
• Communications: any messages you send us directly, including pitch emails and support requests.

We do not collect sensitive personal data and we do not knowingly collect data from anyone under the age of 16.

3. How We Use Your Data

We use your personal data to:

• Operate and maintain your account and the platform.
• Display and promote your published stories as set out in our Terms of Service.
• Send you account-related communications such as notifications and updates.
• Respond to your enquiries and support requests.
• Analyse usage patterns to improve the platform.
• Comply with legal obligations.

Our legal basis for processing your data is primarily the performance of a contract (providing you with the platform services), and where applicable, our legitimate interests in operating and improving the platform. Where we rely on legitimate interests, we have considered the impact on your rights and are satisfied those interests are not overridden.

4. Your Content

5. Sharing Your Data

We do not sell your personal data. We may share your data in the following limited circumstances:

• Service providers: third-party tools and services that help us operate the platform, such as hosting, authentication, and analytics providers. These parties process data on our behalf and are bound by appropriate data processing agreements.
• Legal requirements: where we are required to disclose information by law, court order, or to protect the rights and safety of Travel Pen, our users, or the public.
• Business transfers: if Travel Pen is acquired or merged with another entity, your data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

6. Cookies and Analytics

We use cookies and similar technologies to operate the platform and understand how it is used. This includes essential cookies required for the platform to function, and analytics cookies that help us understand usage patterns. You can control cookie settings through your browser, though disabling certain cookies may affect how the platform works.

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within a reasonable period, except where we are required to retain it for legal or regulatory purposes. Published stories will be removed on account deletion, subject to the content licence provisions in our Terms of Service.

8. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. However, no method of transmission over the internet is completely secure and we cannot guarantee absolute security. We will notify you and any applicable regulator of a data breach where we are legally required to do so.

9. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Access: you can request a copy of the personal data we hold about you.
• Rectification: you can ask us to correct inaccurate or incomplete data.
• Erasure: you can ask us to delete your personal data in certain circumstances.
• Restriction: you can ask us to restrict processing of your data in certain circumstances.
• Portability: you can ask us to provide your data in a portable format.
• Objection: you can object to processing based on legitimate interests.

To exercise any of these rights, contact us at admin@travelpen.io. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

10. International Transfers

Some of our third-party service providers may process data outside the UK. Where this occurs, we ensure that appropriate safeguards are in place in accordance with UK GDPR requirements.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify registered users by email before the changes take effect. The date at the top of this page reflects when the policy was last updated.

12. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us at admin@travelpen.io.